[SECURITY] Fedora 43 Update: chromium-143.0.7499.40-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2025-34257

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/defined endpoint. When an authenticated user creates a task, the definedname value is stored and later rendered in the Overview page without HTML sanitization. An...

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

A new agentic browser attack targeting Perplexity's Comet browser that's capable of turning a seemingly innocuous email into a destructive action that wipes a user's entire Google Drive contents, findings from Straiker STAR Labs show. The zero-click Google Drive Wiper technique hinges on connecti...

EUVD-2025-201431

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint. When an authenticated user adds or edits a dashboard entry, the label and path values are stored in plugin configuration data and...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: nrdot-collector-k8s, sealed-secrets, fleet-server, kserve-rest-proxy, langfuse-fips, crossplane-fips, docker-credential-gcr-fips, aws-flb-cloudwatch-fips, go-fips, sops, juicefs, azuredisk-csi-fips, kube-metrics-adapter-fips, opentelemetry-operator, flannel-cni-plugi...

CVE-2025-62223 Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability

...

Google Chrome Use After Release Vulnerability (CNVD-2026-07245)

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a use-after-free vulnerability that stems from Storage objects being accessed even after they have been released prematurely. An attacker could use this vulnerability to trick a user into visiting a specially craft...

PT-2025-49281

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/schedule endpoint. When an authenticated user adds a schedule to an existing task, the schedule name is stored and later rendered in schedule listings without HTML...

Microsoft Edge (Chromium) < 143.0.3650.66 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.66. It is, therefore, affected by multiple vulnerabilities as referenced in the December 4, 2025 advisory. - Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: rancher-fleet, sops, aws-load-balancer-controller, oauth2-proxy, secrets-store-csi-driver, helm-operator, rancher-system-upgrade-controller, nova, kubernetes-dashboard, k3s, influx, falco-exporter, hcloud, nats-top, k8ssandra-client, pulumi-kubernetes-operator,...

Chromium: CVE-2025-13640 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-13632 Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2025-13630 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

WebXR Flaw Hits 4 Billion Chromium Users, Update Your Browser Now

Cybersecurity startup AISLE discovered a Medium severity flaw in the WebXR component of Chrome, Edge, and other Chromium browsers. Over 4 billion devices were at risk. Update now...

Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

[SECURITY] [DLA 4394-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4394-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 04, 2025 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 43 Update: torbrowser-launcher-0.3.9-2.fc43

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your langu age and for your...

[SECURITY] [DSA 6070-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6070-1 [email protected] https://www.debian.org/security/ Alberto Garcia December 04, 2025 https://www.debian.org/security/faq -...

KLA90805 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in...

CVE-2025-13992

Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...